AWS securityhub medium security documentation change
Summary
Added entry for ElastiCache.1 control update expanding coverage to Valkey clusters and changing implementation rule.
Security assessment
The change documents expanded security control coverage for Valkey clusters' backup enforcement, addressing potential gaps in data protection capabilities. This represents a security control enhancement (CIS Backup Best Practice) rather than a direct vulnerability fix.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index cf3dc0483..f9a667db1 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13 @@ Date of change | Control ID and title | Description of change +October 14, 2025 | [[ElastiCache.1] ElastiCache (Valkey and Redis OSS) clusters should have automatic backups enabled](./elasticache-controls.html#elasticache-1) | Security Hub CSPM changed the title, description, and rule for this control. Previously, the control checked Redis OSS clusters and all replication groups, using the [elasticache-redis-cluster-automatic-backup-check](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-redis-cluster-automatic-backup-check.html) rule. The title of the control was: _ElastiCache (Redis OSS) clusters should have automatic backups enabled_. This control now checks Valkey clusters in addition to Redis OSS clusters and all replication groups, using the [elasticache-automatic-backup-check-enabled](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-automatic-backup-check-enabled.html) rule. The new title and description reflect that the control checks both types of clusters.